DNS type 'mx' lookup of iberdom.com responded with code SERVFAIL

[rg39...@gmail.com]

Hi.

Since last Thursday when somebody using gmail account or using email hosted in google mail servers try to send an e-mail to my domain, they receive a NDR with the following information.

DNS type 'mx' lookup of iberdom.com responded with code SERVFAIL

I don't know the reason why this is happening. I can receive e-mail from all other email servers except from google. If you check any DNSquery Tool all the information regarding my domain is OK.

What could be happening? can anyone give me an idea?

Best Regards.

Ruben Garcia. 

[Alex Dupuy]

Your nameservers are not responding to the Google resolvers (possibly because of rate limiting, possibly due to missing or outdated glue records in the .COM TLD). I see that you recently added secondaries at buddyns.com to the NS records that are served from your two name server IP addresses as listed in the .COM glue, but Google Public DNS will never use those, it only uses name servers that are provided in the NS referral records from the .COM TLD name servers. After a certain limit of non-response, Google Public DNS uses dead nameserver or dead zone detection, that might have kicked in for your domain, and it can take a while to recover

You should contact your registrar (Network Solutions, LLC) and add at least one or two (if not all) of the buddyns.com name servers to your domain registration. However, as the .COM referral TTLs are 2 days, it may take at least that long for Google Public DNS to pick up the new delegations and/or IP addresses, so you may need to wait a while longer to get successful resolution from it.

Flushing the Google Public DNS cache for NS records won't hurt, but probably won't make a big difference either; you could try that after the .COM TLD name servers are serving fully updated information.

[Ruben Garcia]

Hi Alex:

Thanks for your answer. You are right, I recently added secondaries DNS at buddydns.com. I took advantage of this issue to make my External DNS redundants with servers out of my Infraestructure. I was missing the modification of the record in my registrar, that's the reason why Google Resolvers could not do the query.

My question is, nothing has changed about my original NS? why google resolvers is not available of consulting them?

I will make the changes in the registrar so google can make the query using buddyns.com.

Thanks a lot for your help.

[Ruben Garcia]

Hi. Alex. The problem was solved with the modification of the registrar adding the buddyns.com NS.

But I don't find the reason why google resolvers can not find my original Name Servers.

Thanks

[Alex Dupuy]

Google Public DNS resolvers in Chile aren't able to get a response from your name servers within the default time limit of just a few seconds. This is probably due to routing problems between your servers and our data center in Chile (possibly a downed link to a major peer somewhere, or a bad BGP advertisement for your network?).

I'm not sure exactly, but you could look at BGPmon paths between your original name server AS6400 and AS12066 and Google's AS15169. Traceroute to addresses in the range we use for SCL (173.194.91.0/24 and 2800:3f0:4003::/48) from your name servers might also reveal something. Note that the path between our resolver egress addresses (noted above) and your network may differ (possibly a lot) from the path between your network and the 8.8.8.8, 8.8.4.4, and IPv6 anycast addresses.

There's likely nothing you or I can do to fix those sorts of problems (they usually resolve eventually) and having secondaries located on other ASes usually eliminates this as a problem for DNS.

[sa...@vigneshenterprises.in]

Hi Alex,

From last month, I m not able to receive emails to my email account sa...@vigneshenterprises.in. I'm able to send mails but not receive and it fails with DNS LOOKUP of vigneshenterprises.in responded with code SERVFAIL.

kindly please me to resolve this issue.

[Adrián Mihálko]

I have same problem, I posted here a new topic, but it's doesn't showing up in the list?!

[Alex Dupuy]

https://dns.google.com/query?name=www.vigneshenterprises.in&type=MX and https://dns.google.com/query?name=www.vigneshenterprises.in&type=A show no answers, you need to configure MX or at least A records to receive e-mail.

[npkch...@gmail.com]

Hi Alex, 

I'm having the same issue which I'm not able to receive any emails to my email account of...@npkchambers.com but I'm able to send mails to other accounts. 

my clients receive error as "DNS Error: 6852764 DNS type 'mx' lookup of npkchambers.com responded with code SERVFAIL"

[Alex Dupuy]

npkchambers wrote:

I'm having the same issue which I'm not able to receive any emails to my email account of...@npkchambers.com but I'm able to send mails to other accounts. 

my clients receive error as "DNS Error: 6852764 DNS type 'mx' lookup of npkchambers.com responded with code SERVFAIL"

Your domain has a delegation to ns1.streamxhost.com (5.189.156.151) but the name server at that address doesn't know anything about your domain and returns REFUSED:

$ dig SOA +noedns +norec +noall +comment npkchambers.com @5.189.156.151

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7453

;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

You either need to configure (or enable) that service or change your delegation and glue records at the .COM TLD through your registry.

[marcp...@gmail.com]

Alex,

I am getting the same error:

Delivery incomplete There was a temporary problem delivering your message to om...@bodnerflom.com. Gmail will retry for 48 more hours. You'll be notified if the delivery fails permanently.

The response was: DNS Error: 4727646 DNS type 'mx' lookup of bodnerflom.com responded with code SERVFAIL I am able to send messages out but someone who uses Gmail is not able to send me anything....What do I do?? Thanks for all your help! Omer

[Puneet Sood]

The zone has a lame delegation. See http://dnsviz.net/d/bodnerflom.com/dnssec/.

[Grant Pittendrigh]

Hi

I am not getting emails in for this email address, i can only send.

What do i need to do?


Address not found
Your message wasn't delivered to pres...@redbacksafl.com because the domain redbacksafl.com couldn't be found. Check for typos or unnecessary spaces and try again.
The response was:

DNS Error: 23046042 DNS type 'mx' lookup of redbacksafl.com responded with code SERVFAIL

Thanks in advance

Grant

[Abraham Paichua]

Hi all,

I am also getting this same issue and my domain in been down for over a week now.

can anyone help me, please?

[Jose Gonzalez]

I am having the following:

DNS Error: 8349089 DNS type 'mx' lookup of ssspr.com responded with code SERVFAIL

I have checked our DNS records, MX, and so on... and everything seems fine.

Can you help me with this?

Thanks.

[Claus Mattsson]

Hi abraham.

Post the domain so we can troubleshoot it.

//Claus

[Claus Mattsson]

Hi Jose,

Your auth domainserver (ns3.ssspr.com & ns4.ssspr.com) isn't answering to all requests. From my homeconnection, I am able to get this result:

; <<>> DiG 9.16.16 <<>> MX ssspr.com @208.83.38.220

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53697

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 4000

;; QUESTION SECTION:

;ssspr.com.                     IN      MX

;; ANSWER SECTION:

ssspr.com.              900     IN      MX      10 ssspr-com.mail.protection.outlook.com.

;; Query time: 2153 msec

;; SERVER: 208.83.38.220#53(208.83.38.220)

;; WHEN: Wed Oct 13 18:02:21 CEST 2021

;; MSG SIZE  rcvd: 88

But from my Azure instace, I am getting this:

; <<>> DiG 9.11.2-P1 <<>> MX ssspr.com @208.83.38.220

;; global options: +cmd

;; connection timed out; no servers could be reached

Either way, you should improve the performance of your auth nameserver, to support normal operation. You only have one server hosting the zone, which is not recommended:

; <<>> DiG 9.16.16 <<>> NS ssspr.com @j.gtld-servers.net

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57909

;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3

;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 4096

;; QUESTION SECTION:

;ssspr.com.                     IN      NS

;; AUTHORITY SECTION:

ssspr.com.              172800  IN      NS      ns3.ssspr.com.

ssspr.com.              172800  IN      NS      ns4.ssspr.com.

;; ADDITIONAL SECTION:

ns3.ssspr.com.          172800  IN      A       208.83.38.220

ns4.ssspr.com.          172800  IN      A       208.83.38.220

;; Query time: 23 msec

;; SERVER: 192.48.79.30#53(192.48.79.30)

;; WHEN: Wed Oct 13 18:06:06 CEST 2021

;; MSG SIZE  rcvd: 106

//Claus

[Jose Joaquin Pino]

I am having the following:

DNS Error: 4063322 DNS type 'mx' lookup of tumarketchile.cl responded with code NXDOMAIN Domain name not found: tumarketchile.cl

Can you help me with this?

Thanks.

[Claus Mattsson]

Hi Jose,

According to https://dns.google/resolve?name=tumarketchile.cl&type=MX you shouldn't see that issue.

//Claus

[Liviu Savca]

Could you please troubleshoot engelhart-reed.com 

Getting similar error from some Gmail users:

DNS type 'mx' lookup of engelhart-reed.com responded with code SERVFAIL

and

DNS type 'mx' lookup of engelhart-reed.com responded with status: DEADLINE_EXEEDED

[Claus Mattsson]

I have checked your DNS and that seems to work flawless. Google Public DNS is also resolving without issues.

[Ferio Arsyad]

Hi Everyone,

I have similar issue with our email. Below are email notification

Delivery incomplete

DNS Error: DNS type 'mx' lookup of mercatura.co.id responded with code SERVFAIL

Thank you,

[Claus Mattsson]

https://zonemaster.net/result/79d34df013afb351

[Kelly Davis]